Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Patches released for zero-day IE threat
Robert Lemos, SecurityFocus 2006-03-28

UPDATE: Hundreds of malicious Web sites are attempting to exploit the most critical of two flaws announced last week in Microsoft's browser, convincing two companies to release workarounds late Monday to head off the threat.

Comments Mode:
Patches released for zero-day IE threat 2006-03-28
Anonymous (2 replies)
wow how original 2006-03-29
infamous41md (1 replies)
Re: wow how original 2006-03-29
Anonymous (1 replies)
Re: Re: wow how original 2006-03-30
infamous41md (1 replies)
Re: Re: Re: wow how original 2006-04-05
Anonymous
Re: Patches released for zero-day IE threat 2006-03-29
Anonymous (1 replies)
Re: Re: Patches released for zero-day IE threat 2006-03-30
Anonymous (1 replies)
Re: Re: Re: Patches released for zero-day IE threat 2006-04-03
Anonymous (1 replies)
The last time I checked.. Exploits arnt " viri " Make sure when you are going to call someone out on this be sure you know your facts! Every OS is prone to all the same problems. Yes *nix may be less a target but its still an issue. As for the bug in IE that dont mean if your run fire fox your less of a target. Programmers think alike and when comming up with applications its all about logic and how to and it will be very much alike and that will mean there will be a few security issues that maybe alike.

In the English language, the normal plural of virus is viruses. This form of the plural is correct, and used most frequently, both when referring to a biological virus and when referring to a computer virus. The forms viri and virii are also used as a plural.

An exploit is a common term in the computer security community to refer to a piece of software that takes advantage of a bug, glitch or vulnerability, leading to privilege escalation or denial of service on a computer system.

That don't mean OSX and linux are in the clear from any type of virus.

Switchback Virus Infects Macs

OSX/Leap-A worm spreads via iChat instant messaging software!

OSX/Oompa-A

Linux.OSF.8759

Linux.RST

Worm.Linux.Adm

Worm.Linux.Cheese

Worm.Linux.Mighty

Worm.Linux.Ramen

Worm.Linux.Slapper

your employer (Microsoft) writes the worst software on the planet. Get over it. <--- OH! and fyi.. I don't work for MS... and also look at the levels of vulns dealing with open source! there is no reson for open source should contain high level security issues when released!

30.03.2006 : Gentoo bsd-games Buffer Overflow Local Privilege Escalation Vulnerability

30.03.2006 : NetBSD Security Update Fixes Sendmail Remote Code Execution Vulnerability

30.03.2006 : NetBSD Security Update Fixes ELF Interpreter Denial of Service Vulnerability

30.03.2006 : NetBSD Security Update Fixes "mail" Insecure Record File Vulnerability

30.03.2006 : NetBSD bridge ioctl Calls Local Kernel Memory Disclosure Vulnerability

30.03.2006 : NetBSD "pf" IP Fragment Handling Remote Denial of Service Vulnerability

30.03.2006 : NetBSD Security Update Fixes Racoon Remote Denial of Service Vulnerability

30.03.2006 : SCO Security Update Fixes cURL Remote Buffer Overflow Vulnerability

29.03.2006 : Turbolinux Security Update Fixes PHP Restrictions Bypass Vulnerability

29.03.2006 : Turbolinux Security Update Fixes Sendmail Code Execution Vulnerability

29.03.2006 : SuSE Security Update Fixes FreeRADIUS Denial of Service Vulnerability

29.03.2006 : Debian Security Update Fixes Netpbm Command Execution Vulnerability

29.03.2006 : Debian Security Update Fixes Fast Lexical Analyzer (Flex) Vulnerability

27.03.2006 : Gentoo Security Update Fixes OpenOffice Command Execution Vulnerability

27.03.2006 : Gentoo Security Update Fixes RealPlayer Command Execution Vulnerability

27.03.2006 : Gentoo Security Update Fixes Multiple Game Privilege Escalation Vulnerability

27.03.2006 : Trustix Security Update Fixes cURL and Kernel Buffer Overflow Vulnerabilities

27.03.2006 : OpenBSD Security Update Fixes Sendmail Remote Code Execution Vulnerability

27.03.2006 : SuSE Security Update Fixes Multiple Remote Command Execution Vulnerabilities

24.03.2006 : SCO OpenServer Security Update Fixes Xpdf Buffer Overflow Vulnerabilities

24.03.2006 : Debian Security Update Fixes Multiple Xpdf Command Execution Vulnerabilities

24.03.2006 : Debian Security Update Fixes GNOME Evolution Code Execution Vulnerabilities

24.03.2006 : Ubuntu Security Update Fixes Libcairo Remote Denial of Service Vulnerability

24.03.2006 : Redhat Security Update Fixes RealPlayer Command Execution Vulnerability

24.03.2006 : SuSE Security Update Fixes RealPlayer Command Execution Vulnerabilities

24.03.2006 : Mandriva Security Update Fixes FreeRADIUS Denial of Service Vulnerability

24.03.2006 : Mandriva Security Update Fixes Multiple Linux Kernel Local Vulnerabilities

23.03.2006 : FreeBSD "fast_ipsec" IPsec Sequence Number Verification Bypass Vulnerability

23.03.2006 : FreeBSD OPIE "opiepasswd" User Verification Security Bypass Vulnerability

23.03.2006 : FreeBSD Security Update Fixes Sendmail Remote Code Execution Vulnerability

23.03.2006 : Fedora Security Update Fixes Sendmail Remote Code Execution Vulnerability

23.03.2006 : SuSE Security Update Fixes Sendmail Remote Code Execution Vulnerability

ok.. so do you see any type of MS based in there? cause I don't look at all the security issues that *nix has there is more *nix based issuses that get posted everyday then MS based security issues. To me that just shows how lazy open source people are.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11384/33572#33572
Re: Re: Re: Re: Patches released for zero-day IE threat 2006-04-04
Anonymous (1 replies)
Well said? I think not. 2006-04-05
Anonymous
Patches released for zero-day IE threat 2006-03-28
Anonymous (1 replies)
Patches released for zero-day IE threat 2006-03-29
Juha-Matti Laurio (1 replies)
Re: Patches released for zero-day IE threat 2006-03-29
Anonymous (1 replies)
Patches released for zero-day IE threat 2006-03-29
Cd-MaN (1 replies)
Re: Patches released for zero-day IE threat 2006-03-29
Juha-Matti Laurio







 

Privacy Statement
Copyright 2008, SecurityFocus